DEA-C01 Practice Question 78: CloudWatch Logs Subscription Firehose
AWS Certified Data Engineer – Associate (DEA-C01) · Test 8 · question 8 of 10
Application logs from several CloudWatch Logs log groups must be available in Amazon S3 within a few minutes so that analysts can query them with Athena. The team wants a managed solution without writing or hosting code. Which approach should they use?
Show answer and explanation
Answer:
Subscriptions give *"access to a real-time feed of log events from CloudWatch Logs"* delivered to *"an Amazon Kinesis stream, an Amazon Data Firehose stream, or AWS Lambda."* Log events are sent *"soon after being ingested, usually less than three minutes."* A subscription filter on each log group pointing to a Firehose stream that delivers to S3 is fully managed and meets the timing requirement (option D).
- A is wrong because an export task is a batch operation, typically run on a schedule such as daily, so the logs would arrive in S3 many hours late. - B is wrong because saving Logs Insights results by hand is not automated, and it does not create a continuous feed to S3. - C is wrong because it requires writing, hosting, scaling and monitoring polling code, which the team wants to avoid.
Reference: Real-time processing of log data with subscriptions